14305 matches found
GSD-2022-1004145 lockdown: Fix kexec lockdown bypass with ima policy
lockdown: Fix kexec lockdown bypass with ima policy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004144 x86/kvm: fix FASTOP_SIZE when return thunks are enabled
x86/kvm: fix FASTOPSIZE when return thunks are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...
GSD-2022-1004143 net: usb: ax88179_178a needs FLAG_SEND_ZLP
net: usb: ax88179178a needs FLAGSENDZLP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004141 pinctrl: ralink: Check for null return of devm_kcalloc
pinctrl: ralink: Check for null return of devmkcalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004139 RDMA/irdma: Fix sleep from invalid context BUG
RDMA/irdma: Fix sleep from invalid context BUG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004137 ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
ip: Fix data-races around sysctlipfwdusepmtu. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004134 tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
tcp/dccp: Fix a data-race around sysctltcpfwmarkaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004133 ip: Fix a data-race around sysctl_ip_autobind_reuse.
ip: Fix a data-race around sysctlipautobindreuse. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004125 net: stmmac: fix dma queue left shift overflow issue
net: stmmac: fix dma queue left shift overflow issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004124 net: dsa: microchip: ksz_common: Fix refcount leak bug
net: dsa: microchip: kszcommon: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004121 tcp: Fix data-races around sysctl_tcp_migrate_req.
tcp: Fix data-races around sysctltcpmigratereq. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004120 tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
tcp: Fix a data-race around sysctltcpnotsentlowat. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004110 ip: Fix data-races around sysctl_ip_prot_sock.
ip: Fix data-races around sysctlipprotsock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004104 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
tcp: Fix data-races around sysctltcpslowstartafteridle. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004102 gpio: gpio-xilinx: Fix integer overflow
gpio: gpio-xilinx: Fix integer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
GSD-2022-1004099 mm/mempolicy: fix uninit-value in mpol_rebind_policy()
mm/mempolicy: fix uninit-value in mpolrebindpolicy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
[SECURITY] Fedora 36 Update: commit-stream-0.1.2-8.fc36
OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...
Ruby on Rails: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)
While building a PoC for CVE-2022-32209, I noticed that I could not fix my vulnerable application by updating https://github.com/rails/rails-html-sanitizer from 1.4.2 to 1.4.3 even though the Hackerone report about this vulnerability suggested that this should fix it see here:...
